On Apr 28, 2005, at 4:30 PM, Charles Curley wrote:
I recently added a wireless AP to my network. This means I now want
firewalls on all my boxen. Which ports do I have to have open so I can
export NFS?

I found:

sunrpc          111/tcp         portmapper      # RPC 4.0 portmapper TCP
sunrpc          111/udp         portmapper      # RPC 4.0 portmapper UDP
nfs             2049/tcp        nfsd
nfs             2049/udp        nfsd

What else?

Those should be fine for normal use, but you can also look at other open ports via `rpcinfo -p`.

Also be aware of security. NFS has only host/IP based security. Meaning anyone driving by that can hop on your WAP, choose an IP address and mount your exports. and may do nasty things.

--lonnie

Attachment: smime.p7s
Description: S/MIME cryptographic signature

.===================================.
| This has been a P.L.U.G. mailing. |
|      Don't Fear the Penguin.      |
|  IRC: #utah at irc.freenode.net   |
`==================================='

Reply via email to